Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File: _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier: dSlRIDpmjlRKEUiiJBzjQM7TuA9KsEwZnG5YiKSZkoA=
Subject key identifier: B9:B6:5D:8C:37:84:95:14:9A:F9:5F:20:FA:FE:D9:1F:89:4E:03:71
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer: /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial: 01967E6A38174496DF877571F6FA19AD8DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 22:00:12 +0000
Manifest this update: Mon 28 Apr 2025 22:00:12 +0000
Manifest next update: Tue 29 Apr 2025 22:00:12 +0000
Files and hashes: 1: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: LWD8aaBclWbQkKGu18zHwA33pj2Q2gc7FGFE+Nk+9Ok=)
2: yxRSGJfki1mfuRlitSEOgfKdMqI.roa (hash: T4WCtISFCRzOuyE0OUo1rNu8VMdZMXWp/avFZYHhGtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:38:17:44:96:df:87:75:71:f6:fa:19:ad:8d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Validity
Not Before: Apr 28 22:00:12 2025 GMT
Not After : Apr 29 22:00:12 2025 GMT
Subject: CN=b9b65d8c378495149af95f20fafed91f894e0371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:2c:fe:ac:79:26:3a:2b:8a:44:f1:af:b6:
c2:fd:0e:79:d1:08:5d:1b:42:43:30:82:af:00:85:
1c:36:4b:ea:04:48:86:a6:ef:30:e2:6e:72:52:86:
9e:da:3f:b6:90:1c:15:f5:91:31:1e:fd:33:e3:06:
d5:13:92:e4:32:6d:23:48:af:50:8c:b4:b5:32:73:
a8:92:48:e6:26:63:81:a3:5a:aa:fd:f7:9a:13:06:
37:2d:b4:43:d9:b2:e5:5a:44:dc:64:a9:9f:a9:f2:
35:0a:e7:62:57:10:b1:d2:fd:d6:48:20:00:f5:09:
1b:c5:1b:49:26:3c:10:e5:92:83:c2:c6:9e:c1:98:
75:dc:36:ac:b6:a6:0d:9a:60:c4:e1:57:8e:47:c0:
40:59:9e:2d:1e:eb:33:d5:5d:13:24:f4:c4:b5:a2:
7c:bb:57:2f:30:44:8e:50:05:94:6f:8f:41:0f:f4:
5a:e9:4c:57:9d:ad:ad:88:74:e1:d6:35:d9:53:02:
57:0c:35:11:1b:26:b7:f3:8d:f9:cc:13:e8:14:b6:
b3:d3:40:58:56:d1:cd:ca:dc:20:98:4b:6c:6b:98:
0f:10:b4:ad:72:e8:6b:0a:6a:72:a0:f8:83:e2:ec:
c5:06:b0:7b:d0:02:17:98:d6:8f:24:01:0b:ee:82:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B6:5D:8C:37:84:95:14:9A:F9:5F:20:FA:FE:D9:1F:89:4E:03:71
X509v3 Authority Key Identifier:
keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:04:4f:0a:ba:d1:9d:69:8b:5f:1b:db:2f:59:3a:2c:a8:dd:
18:25:42:af:b9:ad:94:c4:dc:c1:26:1c:90:f8:f9:b8:b4:80:
38:a1:b7:62:cf:b3:85:98:03:ec:14:d2:3f:a6:6f:77:30:b3:
5d:7e:30:a3:85:75:a2:d6:03:af:12:e1:85:36:12:9b:63:be:
b1:a1:0d:ec:5f:c8:fc:02:f7:d0:f3:03:cc:26:c7:ab:1c:d3:
60:d2:e1:92:96:b1:b7:65:26:67:0c:bc:9c:3c:54:6e:ac:3a:
e5:da:18:54:92:dd:72:47:81:ce:2d:5e:87:32:93:3b:92:42:
b1:b9:91:52:cd:32:86:2e:20:94:a9:d2:48:f0:bd:d8:c4:a0:
65:3f:03:a2:a5:d9:b9:cf:d5:36:8f:e5:12:b7:57:a8:75:c8:
dd:80:32:30:3f:4f:69:67:9a:7d:0d:ae:d2:bb:d2:d1:43:a0:
c3:28:fd:01:9a:59:60:c4:bd:ea:eb:a1:6b:9b:69:a6:8f:21:
3e:4b:8b:34:d8:c4:f2:41:1e:4b:6b:50:d3:da:1d:41:e4:62:
f4:55:56:84:97:b4:a9:02:b4:16:28:b4:30:90:78:a2:7e:d1:
56:41:66:00:bb:87:20:f0:4b:ed:3d:cb:83:68:c8:98:79:2b:
ac:2f:71:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+ajgXRJbfh3Vx9voZrY3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYmM5ZTkxMDMxNmJlMmYwNDMzYWE5NTM5MmNkNjczOWRj
MjZiODYwHhcNMjUwNDI4MjIwMDEyWhcNMjUwNDI5MjIwMDEyWjAzMTEwLwYDVQQD
EyhiOWI2NWQ4YzM3ODQ5NTE0OWFmOTVmMjBmYWZlZDkxZjg5NGUwMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6Es/qx5JjorikTxr7bC/Q550Qhd
G0JDMIKvAIUcNkvqBEiGpu8w4m5yUoae2j+2kBwV9ZExHv0z4wbVE5LkMm0jSK9Q
jLS1MnOokkjmJmOBo1qq/feaEwY3LbRD2bLlWkTcZKmfqfI1CudiVxCx0v3WSCAA
9QkbxRtJJjwQ5ZKDwsaewZh13DastqYNmmDE4VeOR8BAWZ4tHusz1V0TJPTEtaJ8
u1cvMESOUAWUb49BD/Ra6UxXna2tiHTh1jXZUwJXDDURGya38435zBPoFLaz00BY
VtHNytwgmEtsa5gPELStcuhrCmpyoPiD4uzFBrB70AIXmNaPJAEL7oJwgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm2XYw3hJUUmvlfIPr+2R+JTgNxMB8GA1UdIwQY
MBaAFP28npEDFr4vBDOqlTks1nOdwmuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYt
YTE0NmQ2MDQ3MzM3LzEvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYtYTE0NmQ2MDQ3MzM3
LzEvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWARPCrrR
nWmLXxvbL1k6LKjdGCVCr7mtlMTcwSYckPj5uLSAOKG3Ys+zhZgD7BTSP6ZvdzCz
XX4wo4V1otYDrxLhhTYSm2O+saEN7F/I/AL30PMDzCbHqxzTYNLhkpaxt2UmZwy8
nDxUbqw65doYVJLdckeBzi1ehzKTO5JCsbmRUs0yhi4glKnSSPC92MSgZT8DoqXZ
uc/VNo/lErdXqHXI3YAyMD9PaWeafQ2u0rvS0UOgwyj9AZpZYMS96uuha5tppo8h
PkuLNNjE8kEeS2tQ09odQeRi9FVWhJe0qQK0Fii0MJB4on7RVkFmALuHIPBL7T3L
g2jImHkrrC9xkg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:00:54 2025 by rpki-client